Re: pxeboot, machine dependent kernel

2012-09-08 Thread Andrew Dalgleish

On 8/09/2012 6:14 AM, russell wrote:
...

my intention is to hack boot.c(my guess, at this point I am still just
looking at source) to check for and use some sort of global kernel
macaddress var pxeboot claims to set.

...

I played with a similar patch from here many years ago:
http://nbender.com/install.netboot/install.html

These days I use iPXE instead, it is fairly painless to set up.



Re: Signatures for distribution sets and packages?

2012-09-05 Thread Andrew Dalgleish

On 5/09/2012 1:36 PM, Rowdy OpenBSD wrote:

Is there any way to verify that distribution sets and packages that I
have downloaded have not been tampered with (e.g., by someone with
access to the mirror from which I downloaded them)?


Compare them to the CD set.



Re: Some probelms configuring dhcpd with iPXE options

2012-09-03 Thread Andrew Dalgleish

On 1/09/2012 8:22 PM, C. L. Martinez wrote:

Hi all,

  I am trying to configure dhcpd daemon in a OpenBSD 5.1 host to use
iPXE options for booting vm guests via iscsi. To do this, I have
configured dhcpd.conf with these options:

option space ipxe;
option ipxe-encap-opts code 175 = encapsulate ipxe;

...



Same configuration works for RHEL/CentOS 6.x dhcpd hosts ... What am I
doing wrong??


The base dhcpd won't work this method of breaking the infinite loop, you 
need to create an undionly.kpxe with an embedded script.


The embedded script can be as complex as you like, but it is easiest to 
update if you embed a simple script which chainloads your 'real' script.


http://ipxe.org/howto/chainloading

FWIW, you can boot OpenBSD by using memdisk to load the install iso.



Re: OpenBSD forked

2012-06-18 Thread Andrew Dalgleish

On 14/06/2012 3:44 AM, Dominguez, Roland wrote:

I just came across this article and was wondering if it's legit:
http://www.h-online.com/open/news/item/OpenBSD-forked-to-create-Bitrig-161695
4.html


Those who do not study history...

https://www.bitrig.org/viewgit/?a=viewblobp=bitrigh=59fc82dbaf7eaff6cf9ee6aa607951587f5d6d7fhb=HEADf=usr.bin/banner/banner.1



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Andrew Dalgleish
On Wed, Jul 30, 2008 at 7:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote:
[snippage]
 Quite probably, your server might be terribly out of date.
 OpenBSD servers ought to be updated at least once a year.
 Please look at the first line of the output of dmesg(8).

If  the server has been up for a while, the circular buffer may have
been over-written.

Try:
head -1 /var/run/dmesg.boot

 If the version number is lower than OpenBSD 4.2,
 you should upgrade the base system before applying patches.



NextG networking

2007-10-23 Thread Andrew Dalgleish
I've put up some notes about NextG networking on OpenBSD at
http://www.ajd.net.au/nextg/openbsd.html
including a kernel patch to suit ZTE handsets which will probably work
with other Qualcomm-based handsets.

Regards,
Andrew Dalgleish



Re: .forward for procmail

2007-01-03 Thread Andrew Dalgleish
On Wed, Jan 03, 2007 at 07:47:12PM -0500, Exal de jesus Garcia Carrillo wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Hi list, does anyone knows which is the apropiate way for a 
 .forward on openbsd?, I have tryed with |IFS=' '  exec /usr/bin/procmail 
 -f- || exit 75 #exal but doesn't work.

I use |exec /usr/local/bin/procmail.
Are you sure your procmail is in /usr/bin?


Regards,
Andrew Dalgleish



Re: multiple openbsd installs on the same disk

2006-11-14 Thread Andrew Dalgleish
On Tue, Nov 14, 2006 at 09:43:44PM +0100, frantisek holop wrote:
 hi there,
 
 4.0 is here so time for my second annual reinstall on my notebook.
 i have come to the conclusion that it would be nice to have a
 production system and a development system.  i need a stable
 system to work with (stable packages i don't have to manually
 compile, etc, etc.)  on the dev system i'd like to track current.
 
 but.  because i have only one notebook, these system should be on
 the same physical harddisk.
 
 the only recent thread i have seen is about dual booting with netbsd:
 http://marc.theaimsgroup.com/?l=openbsd-miscm=110575764931297w=2
 
 i am not an mbr/disklabel guru, but it seems to me that it all comes
 down to disklabel becasue i can have 4 primary partitions, but if i
 interpret it correctly, i can't have seperate 'a' and 'b' (and so on)
 for all of these primary partitions, now can i?
 
 would it make sense to make every primary partition into an isolated
 seperate disklabel entity?  i know this wouldn't be a trivial change
 of course, but is it possible at all?

It isn't needed.

I have multiple versions on my laptop.

In the MBR, create a *single* partition for OpenBSD.

In that partition, disklabel to create your slices as needed for
your 'stable' system, plus one for the 'dev' system (mine is hd0h).
(As Nick says in the FAQ, don't allocate all of the space, you
never know when you might need it for another partition.)

Boot from the install CD, cross your fingers and be *very* careful
to specify hd0h as the root when setting up the 'dev' system.

When you want to boot into the 'dev' system, enter hd0h:/bsd at
the boot prompt. (I use a boot manager which can stuff keystrokes
into the BIOS).

If you are brave, you can mount partitions (eg /home) from your
'stable' system into your 'dev' system, but that is probably not
a good idea.

 
 
 or should i just go with virtualization?
 is it in that state already that i can?

I use qemu for quick-and-dirty tests.  It works, but is a bit slow.


Regards,
Andrew Dalgleish



Re: What would you do with field defect rate predictions?

2006-10-25 Thread Andrew Dalgleish
On Wed, Oct 25, 2006 at 12:01:47AM -0400, Paul Luo Li wrote:
 Thank you very much for the response.
 
 By field defect I mean a PR in the Bug Tracking system of the Class
 sw-bug.
 
 I was wondering if you think predictions at the time of release of the
 number of field defects in each month after release can help:
 -allocate resources, such as having enough people available to fix problems
 -adjust the deployment date, like pushing back the release, or
 -identify possible ways of improving the process, assuming that the
 predictions are made using software metrics, such as the number of changes
 to the code  

You might want to check out Michael Lyu's Handbook of Software
Reliability Engineering
http://www.cse.cuhk.edu.hk/~lyu/book/reliability/
(You can now download all 800+ pages in pdf.)

Regards,
Andrew Dalgleish



Re: Rotate many Apache logfiles

2006-09-15 Thread Andrew Dalgleish
On Fri, Sep 15, 2006 at 02:57:57PM +0200, Mackan wrote:
 Hi!
 
 What is the preferred way of rotating Apache's logfiles?
 
 I have many virtual domains, each with its own access and error logfile.
 I'm using CustomLog, not TransferLog.  Apache is chrooted.
 
 Adding every logfile to /etc/newsyslog.conf is one way, but hard to
 maintain.  Is Apache's own rotatelogs program the way to go?

I use newsyslog.

With make and m4, nothing is hard to maintain.


Regards,
Andrew Dalgleish



Re: Low priority or real coders

2006-09-13 Thread Andrew Dalgleish
On Wed, Sep 13, 2006 at 11:49:29PM -0400, steve szmidt wrote:
 I don't get very emotional about either one and try to keep things simple. 
 I'm 
 curious to see how many not equally hard core users prefer vi over vim when 
 having a choice.

These days I mostly use vi, because it is already there.

I used to prefer vim, but it is heading down the emacs path.
Nice OS, but it needs a good editor.



Re: mfs for /var and dhclient

2006-08-10 Thread Andrew Dalgleish
On Thu, Aug 10, 2006 at 09:38:20AM -0700, Riley McIntire wrote:
 Hmmm, so line 201, ``mount -a -t nonfs'' gets all non nfs mounts. Line
 259  260 get nfs mounts of /usr and /var, after starting the network.
 But there would still be a problem with an nfs mount'd /var if
 dhclient was used, no? And with  an mfs ``mount /var'' succeeds twice.

There'd be a problem with nfs mounted anything before dhclient is run.
The N stands for network...


Regards,
Andrew Dalgleish



Re: sendmail

2006-07-27 Thread Andrew Dalgleish
On Wed, Jul 26, 2006 at 10:43:38PM -0600, David B. wrote:
 sorry to bother, can anyone suggest a definitive book I should buy on how 
 to set up Sendmail on Openbsd 3.8?

You might want to read the O'Reilly sendmail Cookbook as an introduction ,
but there's no substitute for reading and understanding the docs.


Regards,
Andrew Dalgleish



Re: Hifn policy on documentation

2006-06-13 Thread Andrew Dalgleish
On Tue, Jun 13, 2006 at 08:43:16AM -0600, Theo de Raadt wrote:
[snip]
 And if you continue baiting me, I will delete the driver from our
 source tree.

You may as well. By the time Hifn release the documentation the speed
of cheap processors will have increased enough to make their current
products marginal.

I've had this happen with add-on DSP boards before.


Regards,
Andrew Dalgleish



Re: why is there . [dot] in default PATH?

2006-04-04 Thread Andrew Dalgleish
On Tue, Apr 04, 2006 at 08:56:39PM +0100, Jon Kent wrote:
 Can see your point here, but I prefer to play on the paranoid side of
 fence hence my dislike of this.  I'm not sure it should be there by
 default, rather if you like it you should add it.

Inexperienced users might add it to the beginning of PATH,
so having it at the end by default is a reasonable compromise.

Anyone with enough experience to know why they want it removed
also has enough experience to remove it themselves.


Regards,
Andrew Dalgleish



Re: OpenBSD 3.8 ports quality?

2006-03-14 Thread Andrew Dalgleish
On Tue, Mar 14, 2006 at 08:34:08PM +, Edd Barrett wrote:
 Nice to see someone who says something constructive. Would you mind if
 
  you can point me to a HOWTO on how to do that. I will be pleased to
  help. I supose that I must compile gnumeric with debugging simbols
  first, as someone stated before. And run gdb or ddd.
 
 
 
 Hi,
 There is no howto, but I think I know how it is done.
 
 cd /usr/ports/math/gnumeric
 make configure
 cd w-gnumeric-x.x.x/gnumeric-x.x.x
 vi Makefile
 
 Now you need to add in the -g switch to compile with symbols (as you
 correctly stated). If you are lucky you will have a variable ${CC}, which
 you can add the switch to.

Most ports support setting CFLAGS.

cd /usr/ports/foo/bar
env 'CFLAGS=-g -O0' make install

Don't be surprised if '-O0' makes the bug dissappear.



Re: 80x50 console res but .. clean font

2006-02-28 Thread Andrew Dalgleish
On Tue, Feb 28, 2006 at 03:59:04PM -0600, Harry Putnam wrote:
 Darrin Chandler [EMAIL PROTECTED] writes:
 
  If it's practical for you, you might try using ratpoison under X. It's
  a lightweight window manager inspired by screen, with the added
  benefit of doing side-by-side split screen.
 
 I've seen several mentions of ratpoison and X.  I'm not running X and
 didn't plan to.  How much X is required to run `Ratpoison'.  I do want
 a screen with much finer resolution that the stock console setup.  It
 is absolutely huge and I want more on the screen.

The ports tree has several light-weight window managers, try them all.
If memory is tight, rxvt uses a tad less than xterm.
On my laptop I use evilwm with rxvt, and get text windows of 58x167


Regards,
Andrew Dalgleish



Re: mergemaster

2006-01-11 Thread Andrew Dalgleish
On Sun, Jan 08, 2006 at 02:46:51PM +, Christian Weisgerber wrote:
[snip]
 
 The questions is, what *do* people use for updating /etc?

I use a cvs vendor branch.


Regards,
Andrew Dalgleish



Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread Andrew Dalgleish
On Fri, Dec 23, 2005 at 11:51:14AM -0600, L. V. Lammert wrote:
 Better recommendation - rsync /home to an external system (especially if 
 you're using Maildir). WAY less overhead! You can even backup more often. 
 An archive machine is less costly than a bundle of DVD-RWs, and you don't 
 have to swap media.
 
 Should you want more than one archive, there are various ways to manage 
 multiple versions.

rsnapshot in the ports tree.



Re: acpi

2005-11-10 Thread Andrew Dalgleish
On Thu, Nov 10, 2005 at 08:24:35AM -0600, Justin Krejci wrote:
 It did not core dump on me.

Same here.



Re: Hard Disk Password Security Info

2005-08-18 Thread Andrew Dalgleish
On Thu, Aug 18, 2005 at 10:28:45AM -0500, Dave Feustel wrote:
 The c't article, the link to which I posted to misc@ yesterday, stated that a 
 data 
 recovery company was able to retrieve the user disk password (set by the 
 authors 
 of the article) from the disk, aparently without opening (and thus voiding 
 the 
 warranty of)  the disk.

If I've stolen your laptop with the aim of stealing data, I'm not
too worried about voiding your warranty.

Personally I'd place more trust in OS-based encryption.
See vnconfig(1).